Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list. The vulnerabilities have yet to be patched on mainline but at least in some cases there are patches undergoing testing or queued in "-next" branches. The CVSS scores are as high as 9.0.

Trend Micro's Zero Day Initiative sent out a number of vulnerability reports to the public Linux kernel mailing list (LKML) rather than the typical private security mailing list. This seemingly was a mistake with Linux's second-in-command Greg Kroah-Hartman responding to each report asking about their submission to the public mailing list.

Among these newly-disclosed vulnerabilities include:

ZDI-CAN-33549 as a CVSS 9.0 scored vulnerability for SMB Direct remote code execution vulnerability due to integer underflow. For this one there is a patch in a Git branch of code intended for Linux v7.5 but now presumably will be expedited for getting to mainline.

ZDI-CAN-33774 as a KSMBD race condition that can lead to remote code execution. Another CVSS 9.0 rated vulnerability.

ZDI-CAN-33367 is a vulneravbility for skbuff skb_zerocopy in the network code that can lead to local privilege escalation. For this one Linux kernel developers received a security report from another source last week over the same issue and a patch is expected to be posted soon.

ZDI-CAN-34068 as a VMWGFX VMware graphics driver bug with an out-of-bounds write leading to local privilege escalation.

ZDI-CAN-34076 an uninitialized resource in the NVMET code leading to information disclosure.

ZDI-CAN-32005 was also posted to the mailing list a day prior for a search-domain TCP query stack buffer overflow leading to local privilege escalation.

The bug and security reports keep on coming in the AI fueled world.

A curated collection of technical resources for GNU/Linux users and system administrators: Manuals, books...

Linux Networking Diverts 50+ Fixes To Next Kernel, Still Bombarded With AI Fueled Churn

The DesktopEditors github repo appears to have actual releases now, with multiple download options for various Linux distros, plus Windows and MacOS. While some refinement may still be needed, this represents a usable release without requiring manual building.

Python 3.15.0 has been released, bringing new features and improvements to the language.

Steam Beta now defaults non-Steam Windows binaries to using Proton for improved compatibility on Linux systems.

Those trying to access the Ubuntu website, ISO downloads, and similar Ubuntu resources today are finding the site inoperable amid what's now confirmed as an ongoing distributed denial of service attack.

Unfortunately, Ubuntu is once again facing a distributed denial of service "DDoS" attack against its web infrastructure. This isn't the first time they have experienced this issue and Canonical's IT team is currently working to mitigate the attack.

Ubuntu down

The Canonical status page is currently tracking the incident. Confirmation of the Ubuntu DDoS attack was also posted to the Ubuntu Discourse.

Valve has implemented VK_AMD_anti_lag support for the AMD RADV driver within Mesa 26.3, improving performance for AMD GPU users on Linux. This update is part of the open-source graphics stack development.

Probably biggest update for word-sys's PDF Editor, now its reached v1.11.2 update. This update is Flatpak and Feature Update. The Flatpak version is officially released on Flathub (https://flathub.org/en/apps/io.github.word_sys.word-sys-pdf-editor) thanks to anyconvert project!

This update introduces Multi-Document Tabs, integrating Adw.TabView and Adw.TabBar so you can open and edit multiple PDFs simultaneously in dedicated tabs. Each tab features independent undo/redo histories, separate zoom states, and dirty indicators to track unsaved edits, complete with quick tab switching (Ctrl+Tab / Ctrl+PageDown and Ctrl+Shift+Tab / Ctrl+PageUp) and tab closing (Ctrl+W).

Another major addition is the Visual Document Merging Workspace (Ctrl+Shift+M). It provides a dedicated side-by-side workspace for combining pages from two source PDFs into a target document, complete with drag-and-drop page ordering, live zoomable previews, insertion markers, inspector details etc.

You guys know that I also replaced external LibreOffice subprocess calls with the native pure-Python anyconvert Document Engine (updated to anyconvert 0.1.9 across all platforms and package manifests). You can now convert PDFs into DOCX, PPTX, ODT, ODP, and TXT entirely in pure Python, featuring both Pixel-Accurate Canvas and Semantic Flow conversion modes. And its 342KB :)

Added Page Rotation (Ctrl+Shift+R for Clockwise and Ctrl+Shift+L for Counter-Clockwise) with persistent 90-degree PyMuPDF rotation preservation.

Added a Dedicated Recently Opened Files Hub, introducing an app-managed recent files list with universal file icons that eliminates system-wide file scanning overhead.

Added Text Alignment & Formatting, bringing 4-way text alignment (Left, Center, Right, Justify) and strikethrough formatting support to the text tool.

Updated the Interactive Quick Start Guide & Manual, expanding the guide and keyboard shortcuts cheatsheet to cover tabs, merging, rotation, and multi-format export with 6 high-resolution screenshots.

Expanded internationalization with 7 Supported Languages, delivering complete UI and documentation localization across English, Turkish, French, German, Spanish, Italian, and Russian.

This update also includes important packaging modernizations and fixes:

• Release Packaging Optimization: Fully separated architecture artifacts for x86_64 (amd64) and aarch64 (arm64), including standalone .deb packages. Removed duplicate asset copies and eliminated oversized source tarballs from automated build releases.
• Packaging Modernization: Purged soffice and flatpak-spawn permissions from Flatpak and AppImage packaging, and updated the Flatpak runtime to GNOME Platform 50 with portal-based file chooser access.
• Application Icon and Desktop Integration: Fixed the icon lookup path to ensure crisp vector SVG rendering on the Welcome screen, About dialog, and system docks across both Flatpak and direct execution.
• Flatpak Window Class Mapping: Aligned application program name with desktop file metadata for proper window tracking and icon association in GNOME Shell and desktop environments.

You can download Flatpak release on Flathub (https://flathub.org/en/apps/io.github.word_sys.word-sys-pdf-editor) or the standalone .deb packages (x86_64 / aarch64), AppImage, or build from source directly on the GitHub Releases page.

Thanks to everyone who supports this project with their ideas, feedback, and bug reports. I hope this helps all Linux users get their PDF work done easily, thank you :)

Flathub has reversed its previous ban on AI-generated content, though developers must still explicitly state when they used AI tools. This policy shift impacts transparency requirements for open-source projects hosted on the platform.

Another Dozen Vulnerabilities Found In The X.Org Server & XWayland

EXT4 is deprecating its journaled "data=journal" mode, which will be removed in future kernel versions. This change affects how data integrity is handled at the filesystem level and is documented in the kernel changelog. Users should review their configurations and consider alternative data modes for improved performance or compatibility.

Billions of phones and most of the servers on the internet run on code that one or two people look after, a lot of it unpaid. An analysis was conducted reviewing a year of commits for 23 of these projects, finding that 11 of them came down to one or two people. xz is still basically Lasse Collin on his own after the 2024 backdoor, and the time zone file every phone reads is kept by a UCLA lecturer in his spare time.

https://sheets.works/data-viz/holding-up-the-internet

The Importance Of Intel's LPMD For Linux Gaming Performance & Power Efficiency

Interesting how he mentions LLMs have a 50% error rate, and predicts how no one will pay for a tool with such a poor rate.